CVE-2012-6150

The winbind_name_list_to_sid_string_list function in nsswitch/pam_winbind.c in Samba through 4.1...

3.6 LowFix available

CVE-2012-6150 is a low vulnerability (CVSS 3.6) in Samba, published December 3, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.79%, the 90th percentile. Fixed in samba 2:4.0.13+dfsg-1.

What does this mean?

Severity: 3.6 LowCVSS 2.0, NVD
Exploit chance: 3.79%EPSS, 90th percentile
Exploitation: None knownNot on CISA’s or ENISA’s lists
Fixed in: 2:4.0.13+dfsg-1samba +137 more

Description

The winbind_name_list_to_sid_string_list function in nsswitch/pam_winbind.c in Samba through 4.1.2 handles invalid require_membership_of group names by accepting authentication by any user, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by leveraging an administrator's pam_winbind configuration-file mistake.

Exploit likelihood

3.79%Up 1.6 points since Feb 4, 2022

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`samba` Debian:12	before 2:4.0.13+dfsg-1	2:4.0.13+dfsg-1
`samba` Debian:13	before 2:4.0.13+dfsg-1	2:4.0.13+dfsg-1
`samba` Debian:14	before 2:4.0.13+dfsg-1	2:4.0.13+dfsg-1
`samba` Mageia:3 From an advisory covering 2 CVEs	before 3.6.15-1.3.mga3	3.6.15-1.3.mga3
`samba3x` Red Hat:enterprise_linux:5::client From an advisory covering 2 CVEs	before 0:3.6.6-0.139.el5_10	0:3.6.6-0.139.el5_10
`samba3x-client` Red Hat:enterprise_linux:5::client From an advisory covering 2 CVEs	before 0:3.6.6-0.139.el5_10	0:3.6.6-0.139.el5_10
`samba3x-common` Red Hat:enterprise_linux:5::client From an advisory covering 2 CVEs	before 0:3.6.6-0.139.el5_10	0:3.6.6-0.139.el5_10
`samba3x-debuginfo` Red Hat:enterprise_linux:5::client From an advisory covering 2 CVEs	before 0:3.6.6-0.139.el5_10	0:3.6.6-0.139.el5_10
`samba3x-doc` Red Hat:enterprise_linux:5::client From an advisory covering 2 CVEs	before 0:3.6.6-0.139.el5_10	0:3.6.6-0.139.el5_10
`samba3x-domainjoin-gui` Red Hat:enterprise_linux:5::client From an advisory covering 2 CVEs	before 0:3.6.6-0.139.el5_10	0:3.6.6-0.139.el5_10

Show 128 moreShow less

Affected packages
Package	Affected	Fixed
`samba3x-swat` Red Hat:enterprise_linux:5::client From an advisory covering 2 CVEs	before 0:3.6.6-0.139.el5_10	0:3.6.6-0.139.el5_10
`samba3x-winbind` Red Hat:enterprise_linux:5::client From an advisory covering 2 CVEs	before 0:3.6.6-0.139.el5_10	0:3.6.6-0.139.el5_10
`samba3x` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs	before 0:3.6.6-0.139.el5_10	0:3.6.6-0.139.el5_10
`samba3x-debuginfo` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs	before 0:3.6.6-0.139.el5_10	0:3.6.6-0.139.el5_10
`samba3x-winbind-devel` Red Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs	before 0:3.6.6-0.139.el5_10	0:3.6.6-0.139.el5_10
`samba3x` Red Hat:enterprise_linux:5::server From an advisory covering 2 CVEs	before 0:3.6.6-0.139.el5_10	0:3.6.6-0.139.el5_10
`samba3x-client` Red Hat:enterprise_linux:5::server From an advisory covering 2 CVEs	before 0:3.6.6-0.139.el5_10	0:3.6.6-0.139.el5_10
`samba3x-common` Red Hat:enterprise_linux:5::server From an advisory covering 2 CVEs	before 0:3.6.6-0.139.el5_10	0:3.6.6-0.139.el5_10
`samba3x-debuginfo` Red Hat:enterprise_linux:5::server From an advisory covering 2 CVEs	before 0:3.6.6-0.139.el5_10	0:3.6.6-0.139.el5_10
`samba3x-doc` Red Hat:enterprise_linux:5::server From an advisory covering 2 CVEs	before 0:3.6.6-0.139.el5_10	0:3.6.6-0.139.el5_10
`samba3x-domainjoin-gui` Red Hat:enterprise_linux:5::server From an advisory covering 2 CVEs	before 0:3.6.6-0.139.el5_10	0:3.6.6-0.139.el5_10
`samba3x-swat` Red Hat:enterprise_linux:5::server From an advisory covering 2 CVEs	before 0:3.6.6-0.139.el5_10	0:3.6.6-0.139.el5_10
`samba3x-winbind` Red Hat:enterprise_linux:5::server From an advisory covering 2 CVEs	before 0:3.6.6-0.139.el5_10	0:3.6.6-0.139.el5_10
`samba3x-winbind-devel` Red Hat:enterprise_linux:5::server From an advisory covering 2 CVEs	before 0:3.6.6-0.139.el5_10	0:3.6.6-0.139.el5_10
`libsmbclient` Red Hat:enterprise_linux:6::client From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba` Red Hat:enterprise_linux:6::client From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba-client` Red Hat:enterprise_linux:6::client From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba-common` Red Hat:enterprise_linux:6::client From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba-debuginfo` Red Hat:enterprise_linux:6::client From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba-winbind` Red Hat:enterprise_linux:6::client From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba-winbind-clients` Red Hat:enterprise_linux:6::client From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`libsmbclient-devel` Red Hat:enterprise_linux:6::client From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba-doc` Red Hat:enterprise_linux:6::client From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba-domainjoin-gui` Red Hat:enterprise_linux:6::client From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba-swat` Red Hat:enterprise_linux:6::client From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba-winbind-devel` Red Hat:enterprise_linux:6::client From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba-winbind-krb5-locator` Red Hat:enterprise_linux:6::client From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba` Red Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba-client` Red Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba-common` Red Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba-debuginfo` Red Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba-winbind` Red Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba-winbind-clients` Red Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`libsmbclient` Red Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`libsmbclient-devel` Red Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba-doc` Red Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba-domainjoin-gui` Red Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba-swat` Red Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba-winbind-devel` Red Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba-winbind-krb5-locator` Red Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`libsmbclient` Red Hat:enterprise_linux:6::server From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba` Red Hat:enterprise_linux:6::server From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba-client` Red Hat:enterprise_linux:6::server From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba-common` Red Hat:enterprise_linux:6::server From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba-debuginfo` Red Hat:enterprise_linux:6::server From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba-winbind` Red Hat:enterprise_linux:6::server From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba-winbind-clients` Red Hat:enterprise_linux:6::server From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`libsmbclient-devel` Red Hat:enterprise_linux:6::server From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba-doc` Red Hat:enterprise_linux:6::server From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba-domainjoin-gui` Red Hat:enterprise_linux:6::server From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba-swat` Red Hat:enterprise_linux:6::server From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba-winbind-devel` Red Hat:enterprise_linux:6::server From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba-winbind-krb5-locator` Red Hat:enterprise_linux:6::server From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`libsmbclient` Red Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba` Red Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba-client` Red Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba-common` Red Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba-debuginfo` Red Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba-winbind` Red Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba-winbind-clients` Red Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`libsmbclient-devel` Red Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba-doc` Red Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba-domainjoin-gui` Red Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba-swat` Red Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba-winbind-devel` Red Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba-winbind-krb5-locator` Red Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs	before 0:3.6.9-168.el6_5	0:3.6.9-168.el6_5
`samba4` Red Hat:enterprise_linux:6::client From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-client` Red Hat:enterprise_linux:6::client From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-common` Red Hat:enterprise_linux:6::client From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-dc` Red Hat:enterprise_linux:6::client From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-dc-libs` Red Hat:enterprise_linux:6::client From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-debuginfo` Red Hat:enterprise_linux:6::client From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-devel` Red Hat:enterprise_linux:6::client From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-libs` Red Hat:enterprise_linux:6::client From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-pidl` Red Hat:enterprise_linux:6::client From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-python` Red Hat:enterprise_linux:6::client From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-swat` Red Hat:enterprise_linux:6::client From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-test` Red Hat:enterprise_linux:6::client From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-winbind` Red Hat:enterprise_linux:6::client From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-winbind-clients` Red Hat:enterprise_linux:6::client From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-winbind-krb5-locator` Red Hat:enterprise_linux:6::client From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4` Red Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-client` Red Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-common` Red Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-dc` Red Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-dc-libs` Red Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-debuginfo` Red Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-devel` Red Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-libs` Red Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-pidl` Red Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-python` Red Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-swat` Red Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-test` Red Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-winbind` Red Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-winbind-clients` Red Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-winbind-krb5-locator` Red Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4` Red Hat:enterprise_linux:6::server From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-client` Red Hat:enterprise_linux:6::server From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-common` Red Hat:enterprise_linux:6::server From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-dc` Red Hat:enterprise_linux:6::server From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-dc-libs` Red Hat:enterprise_linux:6::server From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-debuginfo` Red Hat:enterprise_linux:6::server From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-devel` Red Hat:enterprise_linux:6::server From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-libs` Red Hat:enterprise_linux:6::server From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-pidl` Red Hat:enterprise_linux:6::server From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-python` Red Hat:enterprise_linux:6::server From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-swat` Red Hat:enterprise_linux:6::server From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-test` Red Hat:enterprise_linux:6::server From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-winbind` Red Hat:enterprise_linux:6::server From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-winbind-clients` Red Hat:enterprise_linux:6::server From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-winbind-krb5-locator` Red Hat:enterprise_linux:6::server From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4` Red Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-client` Red Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-common` Red Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-dc` Red Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-dc-libs` Red Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-debuginfo` Red Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-devel` Red Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-libs` Red Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-pidl` Red Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-python` Red Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-swat` Red Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-test` Red Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-winbind` Red Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-winbind-clients` Red Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba4-winbind-krb5-locator` Red Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs	before 0:4.0.0-61.el6_5.rc4	0:4.0.0-61.el6_5.rc4
`samba` Ubuntu:14.04:LTS	before 2:4.0.13+dfsg-1ubuntu1, plus listed versions 2:3.6.18-1ubuntu32:4.0.10+dfsg-4ubuntu2	2:4.0.13+dfsg-1ubuntu1
`samba` openSUSE:Tumbleweed From an advisory covering 56 CVEs	before 4.5.0-1.1	4.5.0-1.1

What each source reports

NVD Score used3.6

Record: CVE-2012-6150
CVSS 2.0: 3.6 LowAV:N/AC:H/Au:S/C:P/I:P/A:N
Weakness: CWE-20
Updated: 2026-11-02

CVE ListNo score

Record: CVE-2012-6150
Updated: 2026-11-02

EUVDEUVD-2012-6006No score

Record: EUVD-2012-6006
Updated: 2026-11-03

GitHub AdvisoriesGHSA-65q8-2h4w-pqq6No score

The winbind_name_list_to_sid_string_list function in nsswitch/pam_winbind.c in Samba through 4.1...

Record: GHSA-65q8-2h4w-pqq6
Weakness: CWE-20
Updated: 2026-11-02

OSVNo score

Record: CVE-2012-6150
Updated: 2026-11-02

OSVDEBIAN-CVE-2012-6150No score

Record: DEBIAN-CVE-2012-6150
Updated: 2026-11-02

Show 4 moreShow less

OSVMGASA-2013-0369No score

Updated samba package fixes multiple vulnerabilities

Updated samba packages fix security vulnerabilities:

Samba before 3.6.22 incorrectly allows login from authenticated users if the require_membership_of parameter of pam_winbind specifies only invalid group names (CVE-2012-6150).

It was discovered that multiple buffer overflows in the processing of DCE-RPC packets may lead to the execution of arbitrary code (CVE-2013-4408).

Record: MGASA-2013-0369
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10069-1No score

ctdb-4.5.0-1.1 on GA media

These are all security issues fixed in the ctdb-4.5.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10069-1
Updated: 2026-11-02

OSVSUSE-SU-2015:0386-1No score

Security update for Samba

This update fixes the following security issues with Samba:

* bnc#844720: DCERPC frag_len not checked (CVE-2013-4408)
* bnc#853347: winbind pam security problem (CVE-2012-6150)
* bnc#848101: No access check verification on stream files
  (CVE-2013-4475)

And fixes the following non-security issues:

* bnc#853021: libsmbclient0 package description contains comments
* bnc#817880: rpcclient adddriver and setdrive do not set all needed
  registry entries
* bnc#838472: Client trying to delete print job fails: Samba returns:
  WERR_INVALID_PRINTER_NAME
* bnc#854520 and bnc#849226: various upstream fixes

Security Issue references:

* CVE-2012-6150
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6150>
* CVE-2013-4408
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4408>
* CVE-2013-4475
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4475>

Record: SUSE-SU-2015:0386-1
Updated: 2026-11-02

OSVUBUNTU-CVE-2012-6150No score

Record: UBUNTU-CVE-2012-6150
Updated: 2026-11-02

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 149 moreShow less